This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
File:                     D95F78E630398477E9BAE976B3EAEDB0059994DB.mft (raw, json)
Hash identifier:          1XdK1YGnP6GqQnhFYZNvnriDJRF22KbBcOlS79zhl6k=
Subject key identifier:   19:7B:2D:E6:FF:02:3A:A5:0C:82:34:11:0A:40:F5:02:58:2E:D7:39
Authority key identifier: D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Certificate issuer:       /CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
Certificate serial:       0F22C4B76EEEAD697196CF719A85325E3ECCD9B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
Manifest number:          0344
Signing time:             Sat 20 Dec 2025 21:01:28 +0000
Manifest this update:     Sat 20 Dec 2025 20:56:28 +0000
Manifest next update:     Sun 21 Dec 2025 23:30:28 +0000
Files and hashes:         1: D95F78E630398477E9BAE976B3EAEDB0059994DB.crl (hash: sATGn7HLqX4WTz46jAJUlZTlsdhcQ1r8QjAxi1eyApU=)
                          2: 323830343a363762633a3a2f33342d3334203d3e20323639363437.roa (hash: Y+fE8BkqszrbIP4g4wpzOkGPcdjysr1CqPeEWpUGIuA=)
                          3: 34352e3139302e3133362e302f32322d3232203d3e20323639363437.roa (hash: qS5l42jMTMud52+Q5WuCosVZYWIuJec8+7s4K9zvd2M=)
                          4: 323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa (hash: cyVUhf1TZuNChMUYn5qaQqNw6BdaLkM3NTVtQTPrLe8=)
                          5: 323830343a363762633a3a2f33322d3332203d3e20323639363437.roa (hash: SfIJW5WPLYXsHY31oI4k3snKmNhXfICkKaFJev5pT9Q=)
                          6: 34352e3139302e3133382e302f32342d3234203d3e20323639363437.roa (hash: Sp3SopNcKakB7jI3Q/O4d4reeHmpO06eDlmoon4YLWM=)
                          7: 34352e3139302e3133372e302f32342d3234203d3e20323639363437.roa (hash: 2lcSwgY6plo6lzCSLskE1qyNDmDYzzc+dJyZYNREMVs=)
                          8: 323830343a363762633a3a2f33332d3333203d3e20323639363437.roa (hash: fq1tAY/Hvr8TiBRRAGWAcmB1gFi2EhTX6NTMAkPcoCA=)
                          9: 34352e3139302e3133362e302f32322d3234203d3e20323639363437.roa (hash: UsoK1E4xojwEmL5lGIIC2QJyIGhJDLI7BwOxgoRjb88=)
                          10: 323830343a363762633a633030303a3a2f33342d3334203d3e20323639363437.roa (hash: 5odB5yWTm4uAB6rsgPg3I+OPxNXaHhdycLs/wC5tT3I=)
                          11: 323830343a363762633a343030303a3a2f33342d3334203d3e20323639363437.roa (hash: a1C+hpzUTZtHk2FHBwHGm01zz+wU4bo5iettVF0Z6Ls=)
                          12: 323830343a363762633a3a2f33322d3438203d3e20323630363437.roa (hash: V3vQoWj/pcT74SkEXQYJqSIiwsCNzpVOZJ9AUjyQ4sQ=)
                          13: 323830343a363762633a383030303a3a2f33342d3334203d3e20323639363437.roa (hash: 9CSAPHN+viGAg80cmPbSF9EDb77vYGOvsBdu/ZyZuPY=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl
                          rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 21 Dec 2025 23:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:22:c4:b7:6e:ee:ad:69:71:96:cf:71:9a:85:32:5e:3e:cc:d9:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Validity
            Not Before: Dec 20 20:56:28 2025 GMT
            Not After : Dec 21 23:30:28 2025 GMT
        Subject: CN=197B2DE6FF023AA50C8234110A40F502582ED739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a8:c2:57:78:90:46:de:11:6d:da:e1:0f:99:
                    94:2d:94:18:78:d3:d7:8a:2d:c9:7b:b4:7b:f0:2e:
                    3e:3e:4d:00:c0:d5:10:3d:a0:fd:d3:f2:b4:29:01:
                    48:2f:8a:44:1e:dd:50:3c:2d:bc:3e:7b:7f:8c:4d:
                    3e:f4:95:8d:ec:25:9c:50:79:6b:85:e8:a3:81:d5:
                    e0:36:ab:2e:09:a4:d2:e8:24:b5:ab:9b:cc:50:be:
                    50:98:3c:05:c1:2f:7f:ff:df:65:94:7b:b6:b8:e5:
                    10:c7:52:94:22:36:98:f4:58:3a:87:6f:b1:fe:65:
                    b8:62:0e:53:ad:b9:0c:27:74:0b:b8:4e:a1:f8:47:
                    13:8c:2b:3a:81:86:95:47:ba:86:19:ab:18:b5:5c:
                    c1:12:21:d0:ce:ff:28:b3:53:78:0f:d5:91:f2:e9:
                    ca:d6:7c:e8:21:c4:d9:0e:22:e9:52:cb:de:f6:11:
                    10:7e:1c:7e:a8:bf:b9:d3:21:ab:4b:c1:45:44:22:
                    70:33:22:2a:e8:85:f2:72:b3:f5:76:e5:59:50:c5:
                    9f:73:4e:9e:f2:fe:ce:25:b3:c3:c3:df:34:66:64:
                    85:36:bc:57:61:93:24:53:1f:b4:14:1b:1f:6e:e3:
                    49:f5:74:7b:2c:e8:cc:4a:e7:8d:57:35:9c:c7:c0:
                    15:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7B:2D:E6:FF:02:3A:A5:0C:82:34:11:0A:40:F5:02:58:2E:D7:39
            X509v3 Authority Key Identifier:
                keyid:D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b8:b5:09:6f:35:61:b6:b1:89:a8:b7:e3:e3:4e:f9:ee:f0:
         7f:bb:04:b9:6e:b4:44:a8:0b:81:50:2a:41:04:11:11:13:cd:
         d5:dd:49:50:de:06:8d:ff:bb:38:88:82:d2:38:97:cd:4a:48:
         80:bc:ed:19:d2:37:71:0c:c6:17:be:9e:c3:26:e2:5e:08:47:
         ed:c0:91:18:ae:9c:da:3d:b2:53:6d:4e:8c:53:cc:b7:2f:4e:
         d5:e7:a7:01:34:8d:89:64:00:91:7f:0f:23:fb:27:f1:ea:c4:
         13:7c:48:5d:48:51:1f:b7:5b:bc:0b:7d:ef:dc:48:fc:1b:0d:
         20:26:f4:2b:62:c4:f4:68:d4:65:2c:6a:18:1e:0a:76:03:ad:
         58:cf:37:48:61:81:57:0e:04:c1:13:5c:60:b2:08:a3:1a:80:
         9e:4d:ac:df:76:af:eb:3d:7e:aa:ad:14:4b:48:99:c0:98:1d:
         9f:d1:99:21:2a:4d:70:b9:1c:3c:fc:03:1f:a1:de:8e:c8:41:
         a3:e7:3a:ef:5b:27:a4:e2:c0:16:8a:3a:c5:1b:85:b7:20:fb:
         d8:3c:3d:ad:e4:fe:6c:ab:54:5b:3f:b5:ff:3d:61:9b:96:01:
         a8:fa:6a:dc:2e:b5:54:18:de:bd:1b:ac:7e:0f:f4:45:71:5e:
         76:82:53:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:35:18 2025 by rpki-client